IS Security Analyst I
Summary
Entry-level information security analyst at Stride Bank who monitors security alerts, investigates threats and vulnerabilities, responds to incidents, and supports audits and compliance (GRC) work. Day-to-day centers on security operations tooling, documentation, and maintaining the bank's security controls.
The IS Security Analyst I is responsible for assisting with the implementation, administration, monitoring, and maintenance of information security controls and technologies designed to protect the Bank's systems, networks, applications, data, and users. This position supports day-to-day security operations by monitoring security events, investigating potential threats and vulnerabilities, responding to security incidents, performing security reviews, and assisting with regulatory and compliance requirements.
PRINCIPAL DUTIES AND RESPONSIBILITIES
- Monitors, analyzes, and responds to security alerts, events, and notifications from security tools and systems to identify potential threats, vulnerabilities, unauthorized activity, and policy violations.
- Assists with the development, implementation, testing, and maintenance of security policies, procedures, standards, processes, and technical controls.
- Maintains accurate and thorough documentation of security investigations, incidents, vulnerabilities, remediation activities, system reviews, projects, and other security-related work.
- Identifies recurring security issues, control gaps, process deficiencies, and opportunities for improvement. Recommends and assists with implementing practical solutions to reduce risk and improve the effectiveness and efficiency of security operations.
- Takes ownership of assigned security issues and projects from identification through resolution or completion. Defines objectives, coordinates with appropriate teams, tracks progress, documents outcomes, and communicates status and risks to stakeholders.
- Assists with security-related audits, examinations, assessments, and governance, risk, and compliance (GRC) activities. Provides documentation and evidence as requested and assists with remediation of identified findings.
- Maintains awareness of current cybersecurity threats, attack techniques, vulnerabilities, security technologies, information technology trends, regulatory requirements, and evolving security standards relevant to the Bank.
- Ability to participate in after-hours security response activities as required.
Non-Essential Functions: Performs other duties as assigned.
